This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa File: 326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa (raw, json) Hash identifier: wa3x+YdBz4iMqCjU1AX+bNH8GFDW/LR3zugaLxxd1vE= Subject key identifier: A6:4E:E5:AC:E7:12:87:32:8D:7E:19:B6:54:48:2B:94:82:2D:BA:B4 Certificate issuer: /CN=AD51B4FA37D423844399722D5240A94674496236 Certificate serial: 72E17786A9B5084A805FFA084A7523330D0A26B2 Authority key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa Signing time: Fri 28 Nov 2025 03:10:28 +0000 ROA not before: Fri 28 Nov 2025 03:05:28 +0000 ROA not after: Fri 27 Nov 2026 03:10:28 +0000 asID: 204535 IP address blocks: 2a14:7583:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e1:77:86:a9:b5:08:4a:80:5f:fa:08:4a:75:23:33:0d:0a:26:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD51B4FA37D423844399722D5240A94674496236 Validity Not Before: Nov 28 03:05:28 2025 GMT Not After : Nov 27 03:10:28 2026 GMT Subject: CN=A64EE5ACE71287328D7E19B654482B94822DBAB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:27:40:8f:80:dc:37:8c:54:cf:0a:52:83:0d: ee:35:e6:46:7f:e1:af:1a:86:0d:1c:fb:54:86:e4: 13:ae:89:71:ac:f9:a9:dc:d6:81:03:61:d6:e5:32: f6:ce:70:3b:98:e3:65:e0:03:96:d9:a2:5f:d2:d3: 18:61:20:88:e0:24:57:42:3a:81:04:2c:90:d8:d0: 4a:43:be:f8:d3:cf:76:cd:3a:c3:fe:99:6b:d6:f2: e4:c7:e3:1a:12:ac:0d:d5:fe:8c:ee:bc:f9:9e:cf: 62:f2:12:8a:14:52:4f:72:80:69:8a:48:f7:58:da: e4:d4:d2:d1:47:8a:13:ac:12:ae:7e:de:be:78:d8: 86:5a:13:42:ff:ec:c2:8d:c6:b9:77:8d:99:fe:19: 18:19:90:26:4e:a0:5e:3f:2d:a1:79:8d:d1:41:98: 38:f6:5b:08:46:8c:4b:e6:13:db:b0:1d:59:e8:e6: f0:40:88:79:76:0c:f6:39:02:19:ae:95:3f:25:7a: d1:63:fe:81:95:80:1a:8d:47:13:22:3e:44:93:b1: 2e:0d:1b:f9:be:b8:df:b4:75:0a:b6:89:5a:e9:2e: a2:25:68:8c:c6:6b:70:7c:d0:9a:67:ed:39:e6:91: 8d:68:74:96:da:cb:a4:86:d2:df:ac:b5:e4:db:90: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4E:E5:AC:E7:12:87:32:8D:7E:19:B6:54:48:2B:94:82:2D:BA:B4 X509v3 Authority Key Identifier: keyid:AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:3000::/36 Signature Algorithm: sha256WithRSAEncryption 76:3f:2c:db:49:58:38:44:cc:c5:25:e4:96:bc:1c:64:58:1c: b4:37:b0:60:ce:be:fd:60:95:f5:bd:68:9b:7f:76:43:8e:7a: 36:47:da:f9:58:38:30:e7:e7:25:37:de:ce:32:70:53:01:48: c5:6f:a7:98:9e:20:69:6c:10:19:a5:cb:a3:39:e9:38:87:e4: 7b:aa:94:66:00:13:29:9c:21:64:8e:ec:74:6c:a7:3d:8b:16: 15:08:e9:52:7d:23:6d:ab:fc:c4:43:53:25:1c:2c:2e:fb:ac: 6f:d7:6d:2f:98:09:21:36:d1:af:a5:32:6f:1a:1e:e0:62:13: 8a:13:ba:76:4a:e3:be:c3:62:07:e8:93:75:07:b8:1c:44:e1: 05:37:2c:af:00:0c:dc:76:e8:c5:86:75:14:8b:c6:31:0a:31: 1a:63:44:20:16:6b:27:3d:f9:6f:61:28:8c:9b:c8:02:0a:74: 0b:75:68:09:95:d9:4c:5e:66:3d:c0:fa:0f:2d:49:c8:56:01: ab:6b:14:49:57:5e:3b:b0:d1:3d:37:51:c3:df:5f:c7:d9:cf: 79:11:74:cd:b2:f1:3b:f2:50:cc:49:6c:99:d0:bd:45:75:84: 6b:ca:65:35:4d:bd:1c:10:1a:76:03:42:d6:cc:49:d0:d9:67: f6:cc:6f:6a -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUcuF3hqm1CEqAX/oISnUjMw0KJrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3 NDQ5NjIzNjAeFw0yNTExMjgwMzA1MjhaFw0yNjExMjcwMzEwMjhaMDMxMTAvBgNV BAMTKEE2NEVFNUFDRTcxMjg3MzI4RDdFMTlCNjU0NDgyQjk0ODIyREJBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJ0CPgNw3jFTPClKDDe415kZ/ 4a8ahg0c+1SG5BOuiXGs+anc1oEDYdblMvbOcDuY42XgA5bZol/S0xhhIIjgJFdC OoEELJDY0EpDvvjTz3bNOsP+mWvW8uTH4xoSrA3V/ozuvPmez2LyEooUUk9ygGmK SPdY2uTU0tFHihOsEq5+3r542IZaE0L/7MKNxrl3jZn+GRgZkCZOoF4/LaF5jdFB mDj2WwhGjEvmE9uwHVno5vBAiHl2DPY5AhmulT8letFj/oGVgBqNRxMiPkSTsS4N G/m+uN+0dQq2iVrpLqIlaIzGa3B80Jpn7TnmkY1odJbay6SG0t+steTbkJGHAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUpk7lrOcShzKNfhm2VEgrlIIturQwHwYDVR0j BBgwFoAUrVG0+jfUI4RDmXItUkCpRnRJYjYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzEvQUQ1MUI0RkEzN0Q0MjM4NDQzOTk3MjJENTI0MEE5NDY3NDQ5NjIzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRDUxQjRGQTM3RDQyMzg0NDM5OTcyMkQ1 MjQwQTk0Njc0NDk2MjM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85YmI3N2M4YS0yZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTMzMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MDM0MzUzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gzAwDQYJKoZIhvcNAQELBQADggEBAHY/ LNtJWDhEzMUl5Ja8HGRYHLQ3sGDOvv1glfW9aJt/dkOOejZH2vlYODDn5yU33s4y cFMBSMVvp5ieIGlsEBmly6M56TiH5HuqlGYAEymcIWSO7HRspz2LFhUI6VJ9I22r /MRDUyUcLC77rG/XbS+YCSE20a+lMm8aHuBiE4oTunZK477DYgfok3UHuBxE4QU3 LK8ADNx26MWGdRSLxjEKMRpjRCAWayc9+W9hKIybyAIKdAt1aAmV2UxeZj3A+g8t SchWAatrFElXXjuw0T03UcPfX8fZz3kRdM2y8TvyUMxJbJnQvUV1hGvKZTVNvRwQ GnYDQtbMSdDZZ/bMb2o= -----END CERTIFICATE-----Generated at Sat Dec 6 07:27:38 2025 by rpki-client